# Pharus pricing

Source: https://www.pharussecurity.com/en/pricing

> Pharus is priced per product family, never per seat. Plans, add-ons, how to count your product families, and what each number costs. Prices are in NOK excluding VAT, which is what is billed. Every workspace starts with 14 days of every software feature, no card and no limit on product families.

- **Free** — 0 NOK (Vulnerability intake): Disclosure page and report form; security.txt and a hosted CVD policy; Inbox with replies and triage; Starts with 14 days of everything
- **Starter** — 1 900 NOK/month or 19 000 NOK/year, excl. VAT (1 product family · up to 3 with extras)
- **Core** — 6 500 NOK/month or 65 000 NOK/year, excl. VAT (Up to 5 product families · up to 10 with extras)
- **Plus** — 14 000 NOK/month or 140 000 NOK/year, excl. VAT (Unlimited families)
- **Launch price** — Pharus is new. The first 10 companies that subscribe pay 30% less for their first 24 months, on any plan, with add-ons and extra product families. After that, the list price applies. The discount is taken off when you subscribe, while places remain. The app shows how many are left.

| | Starter | Core | Plus |
| --- | --- | --- | --- |
| Product families | 1, up to 3 with extras | Up to 5, up to 10 with extras | Unlimited |
| CRA clocks and Art. 14(7) routing | Included | Included | Included |
| SRP packs | Included | Included | Included |
| SBOM matching against KEV and EUVD | Included | Included | Included |
| VEX from your scanners and suppliers | Included | Included | Included |
| Advisories, user notices, support periods | Included | Included | Included |
| Decision record and approvals | Included | Included | Included |
| On-call rota, SMS paging and escalation | Not included | Included | Included |
| Slack, Teams and webhook alerts | Not included | Included | Included |
| Tickets in Azure DevOps, Jira and GitHub | Not included | Included | Included |
| CRA, GDPR, digitalsikkerhetsloven and NIS2 triage | CRA only | Included | Included |
| Board report and annual drill | Not included | Included | Included |
| Annex VII technical file | Add-on, 1 500 NOK / mo | Included | Included |
| DORA triage | Not available | Add-on, 3 000 NOK / mo | Included |
| Review before submission | From 5 000 NOK per incident | From 5 000 NOK per incident | 4 incidents a year, then from 5 000 NOK |

- **Annex VII technical file** — 1 500 NOK/month or 15 000 NOK/year. On Starter. Included in Core and Plus.
- **DORA triage** — 3 000 NOK/month or 30 000 NOK/year. For entities supervised by Finanstilsynet, on Core. Included in Plus.
- **Extra product family on Starter** — 1 200 NOK/month or 12 000 NOK/year. Up to 2 on top of Starter’s one.
- **Extra product family on Core** — 1 500 NOK/month or 15 000 NOK/year. Up to 5 on top of Core’s five. Plus has no limit.
- **Review before submission** — from 5 000 NOK per incident, excl. VAT. We review your drafts before you file, for a fixed one-off fee per incident. On every paid plan. Plus includes 4 incidents per 12 months.

What is a product family? Products that share the same software or firmware line and the same SBOM count as one family, even when they are sold as different models, sizes or variants. A product with its own software stack is its own family. Not sure? Ask us before you choose a plan.

## How to count your product families

Pharus is priced per product family, so the number of families sets the price. Only active families count.

1. List the products with digital elements that you sell.
2. Group products that run the same software or firmware line and the same SBOM into one family. Different models, sizes and variants of that line stay one family.
3. Leave versions out of the count. A family holds every version and release line of its product, each with its own SBOM, so a new release adds no family.
4. Count a product with its own software stack as its own family.

**The test:** a family has one active SBOM per product version. If two products on the same version need different SBOMs, they are two families.

### Examples

- One firmware, sold as Gateway G3, G3 Pro and G3 Mini: **1 family**.
- Gateway G3 on versions 4.1 and 4.2, both still supported: **1 family**.
- Gateway G3 and Sensor S1, each with its own firmware: **2 families**.

Not sure? [Ask us](https://www.pharussecurity.com/en/contact?topic=pricing) before you choose a plan. The 14-day trial has no limit on product families, so you can also add them and see.

## What each number costs

The cheapest plan that covers the number, excluding VAT. Add-ons and review before submission cost extra.

| Families | Plan | Per month, NOK | Per year, NOK |
| --- | --- | --- | --- |
| 1 | Starter | 1 900 NOK | 19 000 NOK |
| 2 | Starter + 1 extra | 3 100 NOK | 31 000 NOK |
| 3 | Starter + 2 extra | 4 300 NOK | 43 000 NOK |
| 4 | Core | 6 500 NOK | 65 000 NOK |
| 5 | Core | 6 500 NOK | 65 000 NOK |
| 6 | Core + 1 extra | 8 000 NOK | 80 000 NOK |
| 7 | Core + 2 extra | 9 500 NOK | 95 000 NOK |
| 8 | Core + 3 extra | 11 000 NOK | 110 000 NOK |
| 9 | Core + 4 extra | 12 500 NOK | 125 000 NOK |
| 10 | Plus | 14 000 NOK | 140 000 NOK |
| 11+ | Plus | 14 000 NOK | 140 000 NOK |

At 10 families, Core with 5 extra families costs the same in NOK as Plus, so the table shows Plus.

Starter covers the CRA only. The on-call rota and SMS paging, alerts, tickets, and GDPR, digitalsikkerhetsloven and NIS2 triage start on Core. If you need them, Core is the cheapest plan for one to three families too.

Starter is paid by card. Core and Plus on a yearly plan can be paid by invoice, with 14 days to pay. Invoice (EHF on request).

## Get a quote

For a price for any number of product families and add-ons, call the quote endpoint. It needs no key and no account, stores nothing, and answers any origin: `GET https://www.pharussecurity.com/quote.json?families=7&addons=dora&interval=year`. [People can build the same quote here](https://www.pharussecurity.com/en/pricing/quote), [in Norwegian too](https://www.pharussecurity.com/priser/tilbud).

| Parameter | Values | Default |
| --- | --- | --- |
| `families` | Required. A whole number from 1. | |
| `addons` | Comma-separated: `technicalFile`, `dora`. One the plan includes costs nothing and is listed under `addonsIncludedInPlan`. | none |
| `needs` | Comma-separated features the plan has to have: `onCall`, `multiRegime`, `boardReport`, `drills`, `integrations`. | none |
| `plan` | `starter`, `core`, `plus`. Leave it out for the cheapest plan that takes the order; on a tie, the bigger plan. | cheapest |
| `interval` | `month` or `year`. A year costs ten months. | `month` |
| `lang` | `en` or `nb`: the language of the text and of the links. | `en` |

The answer has the plan, `lines` that add up to `total.nok` (NOK excluding VAT), `perMonthNok` and `perYearNok`, what every plan would cost under `options`, `reference`, `issued` and `validUntil` (30 days), and `schemaVersion`. Invalid parameters answer 400 with what was wrong. A `plan` that can't take the order answers 422 with the cheapest that can.

**Approval is a person’s.** Give `humanUrl` to whoever decides: it opens the same quote on a page they can print, save as PDF and approve. `approval.steps` says what happens next: an owner orders Starter or Core in the app, by card or, for Core yearly, by invoice; Pharus sets up Plus. Pharus sends no invoice and takes no order from a quote by itself.

## How to buy

- **Starter and Core:** create a workspace at https://app.pharussecurity.com/sign-up?lang=en: 14 days of everything, no card. An owner then subscribes under Settings → Billing.
- **Plus:** set up together with Pharus. [Contact us](https://www.pharussecurity.com/en/contact?topic=pricing).
- **An AI assistant can’t order.** It can get a quote and hand over the link; a person approves.